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^ (54) Title: COMPACT DISC AUTHENTICATION SYSTEM AND METHOD 

< 

(57) Abstract: Disclosed is a compact disc (CD) authentication system and method, and an electronic commerce (EC) system and 
ON paying method. In the CD authentication system, a computer outputs authentication information stored on the CD, and an identifi- 
er cation database managing unit compares the authentication information with the authentication information stored on the CD, and 
when they are identical, permits access to an EC site so that manual typing operation of needed information is reduced. In the CD 
EC system, the computer outputs authentication information stored on the CD to request for an EC, and an electronic gift certificate 
database managing unit stores money information per authentication information and outputs a business permission or prohibition 
message, and a shopping mall database managing unit provides the authentication information to the electronic gift certificate data- 
base managing unit to check the permission of the corresponding business, and when the business is permitted, computes and stores 
the money information on the corresponding commodity in response to request for a purchase, and permits a corresponding business 
£^ according to the money information. Accordingly, the EC can be performed by mstalling a CD that has authentication information 
into a multimedia computer without installing additional device for the EC. 
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Compact Disc Authentication System and Method 
BACKGROH MD OF THF INVENTION 

(a) Field of the Invention) 
, , The. present invention relates to an authentication system and method 
, 5. using a compact disc (CD). More specifically, the present invention relates to an 
identification, and electronic commerce system, using . a, CD including 
authentication information and a paying method thereof 

(b) Description of the Related Art v 5 

Recently, as computer industry and its" various facilities develop, trends 
io to perform public or personal' jobs using the computer ' increase. Accordingly 
networks on which computers are interconnected "in various manners develop 
ahd therebyV users can handle their jobs by accessing other computers that are 
connected on the networks! Especially, as internet usere greatly increase, the 
users can get or provide information by accessing free or charged servers 
is connected on the internet. 

However, when a person freely accesses a specific network using his 
personal computer or visits a particular site on the internet, it is necessary for the 
server W restrict the visits of unidentified visitors. For example, adult sites display 
on the first page a comment window that prohibits Entrance of persons under 
20 age/ however/ this effort is only formal and' cannot Obtain forceful prohibition. 
Also/ charged sites check whether or not a member accesses the corresponding 
site by an authentication process, which is troublesome to the member and 
personal information . ca , n J?e^ 9 len to,ca^se .social problems. 

ic. '•t'.r-'"! •:? ;: Electronic^m^rc^.;^ computers and various 

25 facilities develop. ~ ' ' 

Electronic commerce (EC) enables a buyer to buy goods at an internet 
virtual , shopping mall site via a . network such as the internet without visiting 
shops. The electronic commerce is not limited by business hours of a seller and 
reduces time and expenses that occur when the buyer moves to the shop 
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Hence, the electronic commerce becomes to be an important commerce for 
netizens who frequently use the internet service. 

FIG. 1 shows a block diagram of a conventional electronic commerce. 
When a buyer manipulates a personal computer 10 to send a buying intention to 
5 a merchant server 20 on the internet or a value added network (VAN), the 
merchant server 20 requests to an authentication center 30 an authentication of 
a paying method of the corresponding buyer and a paying gate 40 refers to an 
authentication database that is provided from a banking agency that had issued 
the paying method, and then approves the electronic bommeree. 
10 To pay for the electronic coijinrie.rce^^ fo|^the : electronic 

commerce is used as a paying method w^ich. is categorized into an integrated 
circuit (IC) card .type electronic .money and .a.^ngtwork type ele^ctrpnic money. In 
the IC card type electrgnjc, money, infprrriation. pn the, amount, of the money is 
input tp the IC chip that is attached. An Jtfoe. .card and n can |?e refilled. In the 
is netwqrk type. electronic money, information on the amount of the money is 
stored in a hard disc of the buyer's computer^ 

To use the IC card type electronic money, the buyer should buy an 
additional IC card reader. In the event of. the network type electronic money, 
v , _, ; si ( nce the information on the money is stored, to, the hard disc, of the buyer's 
;20 computer during a .downloading of the -information on the money, the buyer may 
, . feel uncomfortable and this methg^pgn, caus^security problems. * For, example, 
, since the, method tp )f confirm a, reference of ,3 buyer depends on, the buyer's 
individual number apdjpgss^ is -almost defenseless to those who 

. .^^...wo.uld^use^the, syste.ip ?j by steajtl^,. . 0 , , r.-^ r f o t > 

It is an object of "the "present invention to provide "an authentication 
system using a CD storing authentication information to authenticate access the 
network. - 

In one aspect of the present invention, a CD authentication system 
3o 5 comprises a cb storing authentication information to access a specific site; a 
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computer reading, the authentication information stored on the CD and 
requesting an authentication process and receiving an authority, to access the 
specific site according to response signals; a database (DB) storing the 
authentication information on "the CD; and a DB managing unit, when the 

5 authentication information is provided, referring to the DB and outputting an 
access permission or prohibition message to the specific site. 

In another aspect of the present invention, a CD electronic commerce 
(EC) system comprises a CD storing authentication information; an electronic gift 
certificate database (DB) managing unit storing money information per 

0 authentication information that has permission of EC and outputting a business 
permission or prohibition message- and a shopping mall DB managing unit 
providing the authentication information to the electronic gift certificate database 
(DB) managing unit from the CD so as to check the permission of the 
corresponding business, and when the business is permitted, updating the 
money information per authentication information' of the electronic gift certificate 
database managing unit by using the money inWrmation requested for the 
corresponding goods, and permitting a corresponding business according to the 
money information. - : 

In a still further aspect of the present invention, a CD payment method 
comprises the steps of (a) permitting an access and providing information on the 
shopping mall in the cyber space when an access request to an electronic 
commerce (EC) occurs; (b) checking an occurrence of a request for a purchase 
of a commodity, and when no occurrence of the request, checking the 
termination of the shopping process; ;(c) checking whether or not the CD having 
the authentication information is inserted when there is an occurrence of the 

^ e S^s»^ wnen the CD 

is inserted; -(d), comparing the . read authentication information with the money 
information per authentication information stored in,an- electronic gift, certificate 
database managing unit to check the normality, .and when either of the two 
information is not normal,, outputting : a business prohibition message; and (e) 

. permitting a business and updating the difference money between th* recorded 
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money information and paid money information to the money information per 
authentication information, and going to the step (b). 

BRIEF DESCRIPTION OF THE DRAWINGS 

The accompanying drawings, which are incorporated in and constitute a 
5 part of the specification, illustrate an embodiment of the invention, and, together 
with the description, serve to explain the principles of the invention: 
FIG. 1 is a conventional EC system; 

FIG. 2 is an authentication system using a CD according to a preferred 

embodiment of the present invention; 
10 FIG. 3 is an EC system using a CD according to a preferred embodiment 

of the present invention; 

FIG. 4 is a flow chart of an authentication method using a CD from a 

point of view of a personal computer user of FIG. 2 according to a preferred 

embodiment of the present invention; 
15 FIG. 5 is a flow chart of an authentication method using a CD from a 

point of view of a identification database managing unit of FIG. 2 according to a 

preferred embodiment of the present invention; 

FIG. 6 is a flow chart of a paying method for the EC system as shown in 

FIG. 3 according to a first preferred embodiment of the present invention; 
20 FIG. 7 is a flow chart of a paying method for the EC system as shown in 

FIG. 3 according to a second preferred embodiment of the present invention; 

and 

FIG. 8 is a detailed flow chart of an example of the EC using a CD that is 
an electronic gift certificate as shown in FIG. 6. 

25 . 3 i ; DETAILED DESCRIPTION iOR^THE^PREFERRED^EIVIBODIMEWTS 

i : :'V In '-the following ; det&fe^ ortlY^itv^ of 

M. 1 the invention has' been /s'hoWn- r ail^-{3e5brib%d^iiT)ply%y way of illustration of the 

J best mode contemplated by the infvbhfdr(s) of dartying-outf the invention. As will 
be? realized, the invention is capable r of Wddifioat?bh in various- obvious respects, 
30 r all Without departing from ; ^the Invention; Accdfdihgly7 the v drawings and 
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description are to be regarded as illustrative in nature, and not restrictive. 

FIG. 2 is an authentication system using a CD according to a preferred 
embodiment of the present invention. 

As shown in FIG. 2, the authentication system comprises a CD 10 that 
5 . stores, information on the authentication, a user computer 20 that reads 
information on the authentication from the CD 10 and outputs a request signal 
for,identification, .a network 30, a information inquiry database (DB) 40 that 
stores information on the authentication of issued CDs. and an identification DB 
managing 'unit SO that checks information on the various authentication provided 
d- via the network -30 and outputs messages whether or not the user who utilizes 
the computer into which the. CD is inserted is allowed and authenticates the 
identity of ;the CD user. . ■ > ■ 

-:i The CD 10 encodes and stores -information on the authentication and 
key information to access a specific site using an encoding method. 

• After the CD 10 is inserted into a CD-ROM driver (not illustrated) the 
computer 20 decodes the encoded information on the- authentication and 
performs a protocol conversion the decoded information into network instructions 
and provides the network information to the information inquiry database (DB) 40 
via the network 30. Here, the protocol is a communication rule in a software 
manner according to date transfer on the network and includes the transmission 
control protocol/internet protocol (TCP/IP) and the internet work packet 
exchange/sequenced packet exchange (IPX/SPX) of the Novell company used 
on the NetWare network.. , . . - ; ^ . , ,. 

The network 30 connects: a. plurality of computers or other devices to 
.communicate each other and is, referred: to as the .local area network (LAN), wide 
i area neiworkf(WAN)v:or internet, rs; s O ov o • , ;, , ; . , . , 

The informat i°n inquiry database (DB) 40, storing information on the 
authentication of, issued CD 10, comprises a main authentication information DB 
that stores encoded and: stored main authentication information, and a sub 
authentication information DB that stores sub authentication information which is 
attached on a . surface of: the issued CD case as a printed type Of a sticker 
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besides the main authentication information. 

; The reason for comprising the sub authentication information is for 
performing supplementary authentication function to the main . authentication 
information and r for smooth managing the CD issued from the side of 
5 identification system. For example, if the already issued CD is damaged, the 
user cannot access, desired sites using the CD, and therefore, the authentication 
can be re-issued using the sub authentication information: that is;directly printed 
on the surfaceof the GDicase or attached as a sticker, oi^ , ..is 

; .The identification DB rraanagi-hgvunfc 
lp on the. authentication, provided; via the network* 30 is identical with ^information on 
the authentication stored in- the information inquiry database <DB)^40v and when 
they are found identical, outputs an access permission message uto the user 
computer 20 via the network 30, and when not identical, : outputs an access 
prohibition message* to the computer 20. >. s ; v 
is FIG. 3, is an EG s„y$tem using aOO according to a preferred embodiment 

of the present invention, r 

As shown in FIG. 3, the EC system according to a preferred embodiment 
of the present invention -comprises a CD; 100 that ;contains information on: the 
, , vr > authentication, a user computer 200 having multimedia functions, and an EC 
; : 2p ^ managing unit 300 ; that includes an electronic gift certificate DB managing unit 
.310 and a shopping mall DB managing; unit 320: v ;^ 

The CD 100 : includes information on, the t authentication. The information 
is issued by those who manage the EC managirig unit 300^ and the issued 
; r A :. information is ; managed by; the /electronic gift certificate DB managing unit 310. 
. . 25/, ; At this, time, the infpf rjnatiortion; the authentication is stored in: an area where user 
cannot access when a unique ID is issued vfaneaclit CO thatus/the electronic gift 
■■ ; . ; - -.certificate. f .40, •-/ v-i 1 ; r*i ^r^-er ^^ ■•' 

t ; - „ ; ■ < The user t epmputer 2Q0 : : receives 1 the information ^on the: ^authentication 
. : .from : the CD 400 to^ convert into .network instructions,; and outputs the network 
,30 instructions to the EG managing -unit 300; via ?the network. -Currently used user 
computer 200. is equipped ; with multimedia ^functions, internet .connection 
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functions, and CD-ROM driver. 

The electronic gift certificate DB managing unit 310 is equipped with 
information on the money per information on the authentication to check 
permission of the EC. In detail, the electronic gift certificate DB managing unit 
: 310 has information on the money per information on the authentication 
provided . by those who manage the shopping mall DB managing unit 320. The 
information on the authentication is modified by those who manage the- shopping 
mal! DB.managing unit 320, and the information- on the money can be modified 
by those .who- manage the shopping, mall DB managing unit 320. When a 
businessMsrpermitted, the information: on the. difference of money between the 
information on the set money and information on buying money is overwritten to 
the information on the set money, thereby, updating the information on the 
money per speeific CD. : ... , : 

The shopping mal! DB managing unit :320 receives information on the 
authentication provided via the . user computer 200 ; and. provides the information 
to the electronic gift certificate DB managing unit 310 to. check a qualification of a 
buyer who wants the EC, and when he is qualified, permits a purchase of a 
corresponding goods, and provides corresponding information on Ihe money to 
the electronic gift certificate DB managing unit 310. 

A case where only the information on the authentication was contained 
in the CD has been discussed, however; when the CD is released, it is also 
possible that information on a certain amount of money, is further stored in the 
CD and when a business occurs the information- on the stored money is read 
and decreased as much as spent, and information on the money difference is 
updated to the information c« the money . par informatiosT on the authentication 
and concurrent!y.storcd :on the CD . : At' is time , :trre.- C D and CD-ROM are both 
readable and. writable. - - - . • ~. ' 

The CD may further comprise an encryption processing function, 
electronic catalog function, automatic running v function, internet connecting 
function, and shopping browsing function. 

: . ■ In more detail, the encryption. processing function, when ( transferring the 
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information on the authentication and the password via the communication 
networks such as the internet, encrypts the information on the authentication 
andp the password so as to prohibit violation of use of the electronic gift 
certificate. ■-■■■<. .- - , 
5 The electronic catalog function configures various information on the EC 

:„ goods with moving pictures, sounds, voices, photographs, and graphic displays 
: : sa as. to search the goods in off-iine status, and when a buyer selects a desired 
product, the internet connection is automatically initiatedeso that the buyer can 
access the internet shopping: mal ; with- a single click of a mouses 
t io t ; The automatic running function; automatical !y performs the electronic 
catalog function in the -event that the buyer inserts the CD into the CD-ROM 
driver. v-i ' - r-r^"* ;\ '\ . 

The internet connecting function makes the buyer connect the internet 
shopping mall with a single dick of the mouse. . : 
15 The shopping browsing function searches the updated electronic catalog 

or other shopping malls'igoods information: in on-line status. 

■ Since the CD has a great capacity to store data, other unmentioned 
. functions can be added to the above-noted functions to increase feasibility of the 
EC. * 
;20-. . The sub authentication information; that can be equipped by printing the 
- ■ : sub> authentication information- on-the CD or on the surface of the CD case, or as 
an attached sticker; prepares for the damage of the CD so as to manage the CD 
issued by the EC managing unit 300 and to smoothly re-issue the authentication 
i ^. information. : * : w ; ^. : ;: - 

; 25 iur> . rOperations-of an identification. system and EC system using a CD that 
; stores the authentication iriornriation will now: betdescrib^ 

FIG. 4 is a flow chart of an authentication^ method using a CD from a 
point of. view of aupersonal computer user: of FIG. 2 according to a preferred 
embodiment of the present invention . : - ^ 

30 Referring to FIGs. 2 and 4^ it is checked whether or not the CD 10 is 

inserted'- that stores; the authentication information encoded by an encryption 
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method in step s1 10. 

In the event that the CD 10. is inserted, the authentication information is 
read in, step s120, and the authentication, information is converted into network 
instructions and output to the identification DB managing unit 50 via the network 
5. 3C in step s130. 

It is checked whether or not a response signal provided from the 
• - v identification DB managing unit 50 is received in step s 140, and when the 
response, signal is received, it is checked whether or not the response signal is 
an adequate authentication information in step s1 50, and when the 
.0 authentication information isxhecked to be:inadequate, a message to indicate 
- an inadequate authentication, information is displayed in step s160. When the 
authentication mformation is checked to be- adequate, a message to indicate an 
adequate authentication information is displayed in step s170. 
■ " ' After the-step s1 70. it is checked whether orhofra request signal for a 
15 site. connection is provided by the buyer in step s180, and when not provided, it 
is checked whether ormot the*EC will, be terminated, and when the buyer wants 
to terminate the EC. the EC is then terminated, and on the other hand, when not 
terminated, the.step goes to step s180 in step s185. When the request signal for 
: . a site connection is provided by the buyer in step s 180, the buyer isconnected 
20 to the requested specific site in step s1 90. , - ■ . . 

FIG. 5 is a flow chart .of: an authentication method using a CD from a 
point of view of a identification database managing unit of FIG: 2. 

Referring to FIGs. 2 and 5; it: is checked whether or not the main 
. r:.;authe.n«catlon- information. that is.. transformed with respect , to the protocol is 
25 .provrded from- the- user computer ^20, viaqthe. network ,30 in .step s210. When 
R rQvided V' tne.^m3in ,:auihenticatiori .information vis then- referred to the main 
authentication information, DB of information inquiry OB 40;in step s220, and it is 
checked whether or not. the -main authentication information is adequate in step 
s230. When inadequate, a message that access to the site is prohibited is output 
30 to the user computer-20 in step s240, and when adequate, a message that 
access to the .sjte is allowed is output to the. user computer 20 in step s250. 
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Subsequently, it is checked whether or not a request signal for site 
.v*. connection is provided from the -user computer 20 in step s260, and when 
v - provided, the user computer is connected to the corresponding site in step 
<•■ * s270. \ . . : - ■ ... 

5 As noted above, to permit the access to the sites, those who provide the 

specific sites issues the CD that has authentication information, a kind of a key 
information used to access the site. The managers make the authentication 
> information of the issued CDs into database and manage the database, and 
prevent those who does; not .possess the: CD issued by the service providers 
io from accessing the. site) thereby j protecting their Site. 

In the aboyevjAhe service rprovider copies a plurality of CDs having 
authentication iaformation,-and giv^ permission to those who possess the CD to 
access the .site:- -f c.^vskk :>*.<-•' .rr-'., . . ,.. .-.;c\->- r 

On the other hamd; if individual information on each member is stored on 
is a single CD, and an access to a< site occurs using that CD, the service providing 
site can directly ask -the buyer for the site to read the individual information on 
the member instead of the buyer's typing his individual information by himself, 
yand the* buyer only selects yes or no key, thereby, reducing typing manipulation. 
That is, the. card provided by a credit card company can be replaced with the CD. 
20 At this time, restrictions againstrevealing personal information must be made. 

y ,FIG. 6 ns a flow char* of a paying method for the EC system as shown in 
FIG. 3 according to a first preferred embodiment of the present invention. 

Referring to EIGs- 3 andc 6,; i a-; buyer : accesses the shopping mall DB 
managing unit; 320 via an- on-line fuhction>such as the internet^ ancfc the^shopping 
"25.:: mall:D6-martaging.unit 320 : provides information on the: corresponding shopping 
. .site suoh: as elecrtronio vcatalogHncI^ and 
v.- use of :4he?g^odsCtq:thel i user^^Gomputer ^OO toHdispilay r on4h£nmbnitor of the 
computer in step si 10/jand:theibuyenshops iaround in the virtuaH space in step 

30 ■- It is\ checked. "wheth^ buying a 

"commodity in step s/130, and r if -not; termination of shopping is checked, and if 
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the buyer wants to terminate shopping, the process is stopped, and the step 
goes to the step s120 in other case in step s 140. 

if the buyer has a request for buying a commodity in step s130 it is 
checked whether or not the CD including information on the authentication and 
5 money is inserted into the user computer in step s150, and if inserted the 
information on the authentication is read and converted into network instructions 
and.the network instructions. are provided to the shopping mall DB managing unit 
320 in step s160. 

When the buyer finds his desired commodity, he checks detailed 
io specification, price. . and manuals, ' and when he determines to buy that 
commodity, he. dicks the corresponding -icon of the commodity to forward an 
intention to buy that commodity to the shopping mall DB managing unit 320 via 

the internet , 

The shopping mall DB managing unit 320 provides a request for buying 
is. the commodity and the authentication information to the- electronic gift certificate 
DB managing unit 310, which then checks whether or not the authentication 
information in the step s1 60 is normal in step s 170. 

'■■ In- more detail, the electronic gift certificate DB managing unit 310 
- compares the authentication information provided in response to the request by 
20 the buyer with the installed information on the money per authentication 
information to check, the maifunction of the CD, and provides a message 
whether or not to issue an authentication - information to the -shopping mall DB 
managing unit 320 in response to the check result. 

: ■ ■ When, the authentication information is bad ar step s170, a business 
25 prohibition message is, o-utput in step S 1«0'so that -fHfeWI 00 inserted into the 
-• r. ^ user:computer;200.canhoi be used ^ paymenf means; - r 

' " ::mmn :the a^eriticatton-. information is normal in step s170 the 
shopping mall DB managing unit 320 permits the corresponding EC in step s 190 
and. the electronic gift certificate DB managing unit 310 stores the money" 
so d.fference between the- payed money information ' and the recorded money 
informatiorv.and the step goes to the step s120 in step s195. 
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Furthermore, money information can be stored on the CD including the 
authentication information to be used as the electronic gift certificate. 
: . The shopping mall DB managing unit provides the electronic catalog to 

the buyer via the internet. However, considering the high capacity of the CD, it is 
5 also possible that above mentioned electronic catalog information is stored on 
the CD so that the buyer previously searches desired commodities via the 
electronic catalog on the CD,; and then provides the: buying request to the 
shopping mall DB managing unit. 

FIG. 7 is a flow chart of ,a paying method for the EG system as shown in 
10 , FIG. 3, according to.a second preferred embodiment of the present invention. 

; Referring to FIGs. 3 and =7, it is- checked whether or not the CD storing 
the authentication information- is inserted in step s210. When inserted, an 
electronic catalog function starts according to the electronic ; catalog function 
installed on the CD and displays information on the catalog of the shopping mall 
is goods, and. the buyer shops .around: in^ the? virtual space ^provided by the 
electronic catalog ir>3tep,s220; - ~ ; l 

It is checked whether or not the buyer requests a commodity in step 
s230, and if he dose not, the termination of the shopping process is checked, 
r ; and when the buyer -wants to terminate the. shopping process,rthe process is 
20 terminated, and : on the other hand-*he buyer dose notwant to, the process goes 
. to the step s220, and the buyer continues to shop ; around in the virtual space 
provided .by the electronic catalog. in* step. s240. 

If he does in step s230 : he accesses the shopping mall DB managing 
unit 320 : in step s250. Xhe : information :ion the desired commodity and 
25 authentication; ;infprmatt^ converted, into the 

network instructjpn^viWh^ torthershopping ;mall:DB-managing 

- unit 320 in step ;s260. The -shopping mall QB^managing ?unit A 320 provides the 
comrnod ity buying - request .and the ; authentication! .information to the electronic 
gift certificate DB marnaging: unit /310, .wfiieh then checks whether or not the 
30 information in th3;Step;s26Q is : normal, or bad. in step s270: 

In mere detail, the electronic gift-certificate DB, managing unit 310, in 
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response to the buying request, compares the stored money information per 
- authentication information with the authentication information provided through 
the shopping mall DB managing unit 320 to check the status of the 
corresponding business, and provides the status of the authentication of the 
5 business to the shopping mall DB managing unit 320. 

When the status of the authentication is bad in the step s270, a business 
prohibition message is output, and therefore, information that the CD 100 
inserted into: the user computer 200 cannot be used as a payment means is 
provided in- step s280. On the other hand; when the status of the authentication 
.c .s normal in the step s270, the 'shopping mall DB managing unit 320 permits a 
corresponding business in step " s290? and the electronic gift certificate DB 
managing unit 310 stores the money difference between the payed money 
corresponding to the business and the stored money, and the process goes to 
the step s220 in step s295. ' i •<•; 

15 ' FIG. 8 is a detailed flovv chart of an example of the EC using a CD. 

Referring to FIGs. 3 and 8; when the CD that is the electronic gift 
certificate is inserted into the CD-ROM driver of the user computer in step s300 
the user computer automatically accesses the on-line shopping mall in step s310, 
and the homepage of the corresponding shopping mall is displayed, and the 
20 buyer shops around in the : displayed -shopping mall and selects desired 
commodity in- step s320/dr, when ihe CDls inserted into ; the CD-ROM driver of 
the user computer, the electronic catalog starts in the off-line status to display 
the commodities on the monitor screen in step s3 15, and the buyer shops 
-around in the virtual shop and selects-^ 
25 - the computer connects to the ihferner in step^ s330, and ih the^ine status' 
information on the electronic gift certificate "iD ' and ^^ctfed^mmdities is 
transferred to a cbmrnodify information DB in the shaping mail host computer in 
step s340! • • .: ■-, • • ., 

The shopping mall DB managing unit 320 rebeives information on the 
30 goods in stock from the commodity information DB and checks stock status of 
the corresponding commodities in step s350. 
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The shopping mall DB managing unit 320 receives information on the 
electronic gift certificate ID and left money from the user computer and 
„ compares the received information with an authentication information data DB 
in step s360, and when the comparison result is identical, a password is 
5 requested to the buyer in step , s370, and when not identical, a business 
prohibition message is output to the user computer. 

In response to the request for the passwqrd : by^ the r shopping mall DB 
managing unit 320, the user .inputs the?. password- in step s380, and the user 
computer enqrypts the input password using an encryption method of a open key 
method jn step.s3.90 to, provide to the.shopping rnaJl DB managing .unit 320. 

. The shopping malL DB i^anagiigg , unit 320, ; compares; the encrypted 
password with the password .of the- corresponding user stored; Jo , the electronic 
gift certificate DB managing, unit jn st$p ; s400,>and whenithe cqmparison result is 
identical, the corresponding business is permitted; in step s4 : 10. 4 
5 The.ahopping .maH DB ; .managing wnit 32P in the response of permission 

of the business reports the business permission to the user computer in step 
s420, and. the user computer checks the commodity and left money and 
terminates the EC in step s430. 

When the shopping mall DB managing unit 320 provides the information 
on the price of the buying commodity to the electronic gift certificate DB 
managing unit 310, which modifies the. ..information -qn f the left money of the 
corresponding commodity in step:s440 ancLstoce$ infprmation : qn the modified 
left money to a business 7 re.cord : file._ At this, time, the electronic, gift c certificate DB 
rrianaging unit 310 stores. the ;: j ,the^ corresponding -electronic gift 

5 . qertjfic§te IQ.Jp.uying^^ an&pther thing? to back up the 

, _exQcuted business, jn. step s45Q.^ . ( ,,^ r .^ ;c: ,, r . ^ . ,^ 

_ t . .Furthermore^ is readable; and writable,- tte ; -mo^ified money 

information can be recorded on the CD so that the buyer, possesses the 
information on ,the. money difference. as.^ baqkup file, , r , v . . , - 
o While this invention.. has v b^^ what is 

presently considered to be the most practical and preferred .embodiment, it is to 
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be understood that the invention is not limited to the disclosed embodiments, but, 
on the contrary, is intended to cover various modifications and equivalent 
arrangements included within the spirit and scope of the appended claims. 
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WHAT IS CLAIMED IS: 

1 . A compact disc (CD) authentication system, comprising: 
?rp;a QD-storing authentication information to access a specific site; 

a computer reading the authentication information stored on the CD and 
5 requesting an authentication process and receiving an authority to access the 
specific site according to response signals; 

a database (DB) storing the authentication information on the CD; and 
a DB managing unit, when the authentication information is provided, 
referring to the DB and outputting an access permission or prohibition message 
10 to the specific site. 

2. The system of claim 1, wherein the CD further comprises a 
supplementary authentication information of the authentication information on a 
surface of the CD or the CD case. 

3. A compact disc (CD) electronic commerce (EC) system, comprising: 
is a CD storing authentication information; 

an electronic gift certificate database (DB) managing unit storing money 
information per authentication information that has permission of EC and 
outputting a business permission or prohibition message; and 

a shopping mall DB managing unit providing the authentication 

20 information to the electronic gift certificate database (DB) managing unit from the 
CD so as to check the permission of the corresponding business, and when the 
business is permitted, updating the money information per authentication 
information of the electronic gift certificate database managing unit by using the 
money information requested for the corresponding goods, and permitting a 

25 corresponding business according to the money information. 

4. The system of claim 3, wherein the CD further comprises an electronic 
catalog information on the EC goods. 

5. The system of claim 4, wherein the electronic catalog information 
further comprises an automatic processing unit to automatically access the 

30 shopping mall DB managing unit. 

6. The system of claim 3, wherein the CD comprises a program to 
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connect to the shopping mall DB managing unit in on-line status. 

7. The system of claim 3, wherein the CD further comprises a shopping 
web browser to transfer information on the commodity of the shopping mall DB 

managing unit. 

8. The system of claim 3, wherein- the CD further comprises an 
encryption processing unit to encrypt the authentication information using an 
encryption algorithm of an open key method. 

9. The system of claim 3, wherein the CD further comprises information 
on the money encoded with an encryption method. 

10. The, system of claim 3, wherein the CD further comprises a 
supplementary authentication information of the authentication information on a 

. surface of the CD or. CD case. 

■ 11. In~ a method for authenticating a user having a compact disc (CD) 
comprising a CD that stores authentication information, a computer that converts 

is the authentication information into network instructions and outputs the results, 
and an identification database (DB) managing unit that checks the authentication 
information provided on the network and outputs an access permission or 
prohibition message to a specific site, a CD authentication method, comprising 
the steps of: 

(a) checking normality of the authentication information when the 
authentication information read from the CD is converted and provided; 

(b) outputting an access prohibition message to the -specific site when 
;the authentication information is checked to be abnormal; and 

; v ; , (c) permitting' an access. to the specific site when the authentication 
25 . information is' checked to;be normal. . ; r. ; 

^M2v Th©;rrieth^ (c)' further cdmpfises the 
: \,: steps-of:?: * jj-'-*-.^. c i -orr'tro-*} r.r.^n::-.: •■vri-.-v -.^ ■■ , 

^(d)^checking:, whether or ^ tiot - a orecHiest- signal for site connection is 
provided; and 

30 , (e) -waiting ; when the signal ris-nof prdvided; and connecting a user 

computer with the requested site.-' " - 



20 
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13. A compact disc (CD) payment method, comprising the steps of: 

(a) permitting an access and providing information on the shopping mall 
: . in the cyber space when an access request to an electronic commerce (EC) 
occurs; 

5 (b) checking an occurrence of a request for a purchase of a commodity, 

and when no occurrence of the request, checking the termination of the 
shopping process; - - ; jj\ - i 

v (c) checkingvwhether or not the CD having the authentication information 
is inserted when there is an occurrence of the request in; the step (b), and 

10 reading the authentication information when the CD js inserted; ;^ 

(d) comparing the read, .authentication ■■; information, with < the r money 
information per authentication information stored in; an electronic xjtft certificate 
database managing unit tQ ; check the- normality; and when either of the two 
information is not normal, outputting a business prohibition message; and 

15 (e) permitting ra i business, and updating the difference money between 

the recorded money information and paid money information to. the money 
information per authentication information, and going to the step (b). 

14. The.method of claim 13, wherein the step (a) comprises the step of 
manipulating a stored electronic catalog by an electronic catalog automatic 

20 processing unit installed on the-CD. , 

15. The method, of plaim 13„ wherein the step (d) compares the read 
authentication information : with ;the ; money information per authentication 
information installed in an. electronic gift certificate database. managing unit. 

. . c 16. A compact disc ,(GD) payment method, comprising the steps of: 
25 (a) checking an occurrence of-a request for a purchase: of =goods, and 

, :vyhen there, js no request,} checking. the^termination of the : shopping process in 
the event of receiving shopping mall information by starting a stored' ^electronic 
^ catalog function by an electronic catalog automatic processing, unit stored in the 
CD; 

so (b) permitting an access to an shopping mall database managing unit 

and reading the authentication information, stored in the CD when there is a 
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request in the step (a); 



(c) comparing the read authentication information with the money 
information per authentication information stored in an electronic gift certificate 

database managing unit to check badness of the information, and outputting a 
business prohibition message when either of the two information is bad; and 

(d) permitting a business when the read authentication information in the 
step (c) is normal, updating the money difference between the recorded money 
information and paid money information to a new money information, and going 
to the step (b). 



10 
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